Overview

overview

10

Static

static

10

2025-03-29...om.exe

windows7-x64

10

2025-03-29...om.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-29_8a3b83fdea0984b4388d5ebeded4dc02_black-basta_cobalt-strike_rhadamanthys_satacom

  • Size

    10.8MB

  • MD5

    8a3b83fdea0984b4388d5ebeded4dc02

  • SHA1

    bc1884047331647e4633ec0efb7370ea82a316a4

  • SHA256

    c03dc0fa98369cf3ce5429f50ea3df6c9701fe0f10a92182d86c765b66a3fa4c

  • SHA512

    5d261087735a7bd0009ba61755c71469e444142a8aa23e1aa5b96768c0614e1e20e4a9c12d731fddb0c9cbca4d32704caa4d29033ccfecef611b976302aedce0

  • SSDEEP

    196608:VvZnQHQZg0HiouWJysVYvsOaoyMxxvjDDAx0al2dxwMFnVpdVpqmG:HngCHi9WJdoyMxtDDAxBI7VhsH

Score
10/10
pyinstallersvcstealer

Malware Config

Signatures

  • Detects SvcStealer Payload 1 IoCs

    SvcStealer aka Diamotrix Clipper is a stealer/downloader written in C++.

  • Svcstealer family
    svcstealer
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-03-29_8a3b83fdea0984b4388d5ebeded4dc02_black-basta_cobalt-strike_rhadamanthys_satacom
    .exe windows:6 windows x64 arch:x64

    9a7aac03f87ee217624edc9b2f58dd35


    Headers

    Imports

    Sections

  • zx.pyc